Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/H1A7uaM54kLOJ6aconq6fZrKspY.roa
File:                     H1A7uaM54kLOJ6aconq6fZrKspY.roa (raw, json)
Hash identifier:          HaFbnxWcvSS0ml56l21x/16ARuwZoe4Nezyvo1RkPbI=
Subject key identifier:   1F:50:3B:B9:A3:39:E2:42:CE:27:A6:9C:A2:7A:BA:7D:9A:CA:B2:96
Certificate issuer:       /CN=6dd2e9b3a4d7b24b3a6aa14f3eda3f14fa29c76b
Certificate serial:       30E74AC2
Authority key identifier: 6D:D2:E9:B3:A4:D7:B2:4B:3A:6A:A1:4F:3E:DA:3F:14:FA:29:C7:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bdLps6TXsks6aqFPPto_FPopx2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/H1A7uaM54kLOJ6aconq6fZrKspY.roa
Signing time:             Sat 01 Jan 2022 10:55:38 +0000
ROA not before:           Sat 01 Jan 2022 10:55:38 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204150
IP address blocks:        77.78.144.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 820464322 (0x30e74ac2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd2e9b3a4d7b24b3a6aa14f3eda3f14fa29c76b
        Validity
            Not Before: Jan  1 10:55:38 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1f503bb9a339e242ce27a69ca27aba7d9acab296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:92:76:20:80:22:58:e9:a4:2a:a7:05:a4:c1:
                    87:12:b2:28:9c:bc:65:bf:d1:96:84:13:a2:9f:79:
                    4f:7a:2a:2d:16:f3:ad:60:dd:de:00:ba:80:a6:e5:
                    8d:e8:70:92:09:b6:e1:67:77:e6:b4:66:45:08:ba:
                    b6:e2:2a:9f:bb:42:47:56:90:97:1d:39:05:5e:e1:
                    77:37:88:a1:9f:83:e6:06:4c:d3:24:a7:7f:61:12:
                    02:e7:29:4f:91:67:3e:b9:df:b1:dc:91:e2:e4:ab:
                    cb:c0:6f:5e:3c:93:47:5a:3b:55:12:bf:45:27:a5:
                    d1:49:d8:3e:fa:77:2b:60:d6:ee:9b:99:b7:52:00:
                    c2:a1:32:b8:99:58:43:46:eb:f9:1a:b6:40:d1:7d:
                    28:52:1a:42:8b:0a:2c:86:77:71:ae:76:99:45:66:
                    4e:0b:7f:92:6b:67:e0:c5:bd:25:6f:5d:4c:a3:2d:
                    75:e4:4e:54:25:18:93:77:56:50:d2:cf:23:75:58:
                    8e:87:c0:cf:df:5b:3e:ef:56:1d:5a:a6:f6:03:91:
                    26:39:39:01:a0:3d:db:67:68:d5:7e:7c:2f:fe:7d:
                    81:1b:d4:06:43:3a:aa:da:93:11:6a:a3:db:97:b1:
                    68:ee:21:5b:a9:9c:aa:2d:07:50:43:1b:8c:d2:b7:
                    36:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:50:3B:B9:A3:39:E2:42:CE:27:A6:9C:A2:7A:BA:7D:9A:CA:B2:96
            X509v3 Authority Key Identifier:
                keyid:6D:D2:E9:B3:A4:D7:B2:4B:3A:6A:A1:4F:3E:DA:3F:14:FA:29:C7:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdLps6TXsks6aqFPPto_FPopx2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/H1A7uaM54kLOJ6aconq6fZrKspY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/bdLps6TXsks6aqFPPto_FPopx2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.78.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:9a:d1:62:38:9e:77:f2:4d:20:98:ce:24:3e:e1:07:d3:20:
         34:c1:de:82:7c:d8:87:e4:d5:e5:8e:a2:99:6d:cf:36:10:1f:
         18:c6:4e:e9:83:af:09:28:ae:58:30:e6:7d:2c:a7:fc:55:28:
         4f:59:1c:a7:45:6f:50:83:32:68:f2:4f:42:9f:ed:c8:a3:b8:
         94:60:2b:15:3b:65:ac:1a:3c:57:a3:ab:e0:cd:89:a6:5e:a5:
         de:e3:30:c4:c5:0e:6c:d3:06:e0:64:24:ce:e2:d0:ad:32:f2:
         dd:82:c3:c6:b5:84:ca:7a:85:e3:f0:a3:cf:8a:aa:ae:91:e3:
         66:e6:2e:2b:98:bb:60:18:aa:b2:16:ed:97:91:d5:f4:60:fc:
         07:7f:ab:97:b8:43:79:25:74:c3:18:56:43:91:1f:69:61:a4:
         17:d2:1f:bb:e7:50:3e:d4:9d:7d:51:4b:87:97:a7:32:24:5a:
         f8:95:75:19:95:fa:af:04:2a:f0:ca:cf:ad:b4:2a:2b:a2:4d:
         d3:2d:9a:b4:92:8b:6f:f8:1b:94:bc:9f:e1:d5:32:e2:e4:4a:
         b8:51:80:6c:5b:7e:27:18:3c:1f:b7:82:ca:84:5e:d2:e2:67:
         fb:ed:39:a5:67:0b:22:09:2a:52:e8:0c:b8:f6:8c:af:78:d0:
         0c:18:96:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:34 2023 by rpki-client on console-fra.rpki-client.org